The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Apply OS X security update 2013-002Upgrade macOS to the latest version | Aug 28, 2015 | Apr 24, 2012 |
| Apple Osx Openssl | — | Apply OS X security update 2013-002Upgrade macOS to the latest version | Jun 20, 2013 | Apr 24, 2012 |
| Hpux | — | Update openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-DOC to the latest version | Aug 11, 2017 | Apr 24, 2012 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | May 1, 2012 | Apr 24, 2012 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory4 | Nov 30, 2017 | Apr 24, 2012 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.0.9-0.175.0.8.0.1.0 on Solaris 11.0 | May 29, 2017 | Apr 24, 2012 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.1R15Update Pulse Connect Secure to version 7.2R11Update Pulse Connect Secure to version 7.4R3Update Pulse Connect Secure to version 7.3R6 | Oct 28, 2020 | Apr 24, 2012 |
| Suse | — | Upgrade openssl-docUpgrade libopenssl0_9_8-x86Upgrade libopenssl0_9_8Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl-develUpgrade libopenssl0_9_8-hmacUpgrade libopenssl0_9_8-32bitUpgrade openssl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8Upgrade libssl1.0.0 | Nov 8, 2024 | Apr 24, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub